Forum Replies Created

Viewing 2 replies - 1 through 2 (of 2 total)
  • gobu check your functions.php files
    the malware script might be written in starting few lines, remove them. then remove feed.php file from wp-include folder which causes some user have the adware, and some not!

    b3hz4d (@b3hz4d) gave a solution and that is working well except on thing I would like to add because i have faced the same issue of onclkad malware and i have finally resolved it. The complete solution is

    1. DELETE THIS FILE /wp-includes/class.wp.php
    2. DELETE THIS FILE /wp-includes/wp-vcd.php
    3. REMOVE BELOW GIVE CONTENT FROM THIS FILE /wp-includes/post.php

    if (file_exists(dirname(__FILE__) . ‘/wp-vcd.php’)) include_once(dirname(__FILE__) . ‘/wp-vcd.php’); ?>

    4. Look for an additional folder in your \wp-content\plugins\ folder. This folder contain the main source. Locate it and delete this folder and you are all done. In my case the folder names in my two installations were \wp-content\plugins\wp-smushit\ AND \wp-content\plugins\wordpress-seo\ .

    5. After completing above four steps, delete cache before accessing your site. You are all done. Enjoy.

    Hayat
    techibeez.com.au

    • This reply was modified 7 years, 2 months ago by hayat5050.
Viewing 2 replies - 1 through 2 (of 2 total)